Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-1681

Высокий

ALT-PU-2018-1681: package libwebkitgtk4 update to version 2.20.2-alt1

Источник
errata.altlinux.org
Дата публикации
09.05.2018
Дата обновления
09.05.2018
Устраненные уязвимости
2
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades libwebkitgtk4 to version 2.20.2-alt1.

Устраненные уязвимости2

Ссылки1

ALT-PU-2018-1681https://errata.altlinux.org/ALT-PU-2018-1681

Связанные уязвимости

ubuntu логотип

CVE-2018-4200

CVSS3: 8.8
ubuntu
больше 8 лет назад

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free.

redhat логотип

CVE-2018-4200

CVSS3: 5
redhat
больше 8 лет назад

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free.

nvd логотип

CVE-2018-4200

CVSS3: 8.8
nvd
больше 8 лет назад

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free.

debian логотип

CVE-2018-4200

CVSS3: 8.8
debian
больше 8 лет назад

An issue was discovered in certain Apple products. iOS before 11.3.1 i ...

ubuntu логотип

CVE-2018-11712

CVSS3: 7.5
ubuntu
больше 8 лет назад

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.